Skip to content
OpenAdvisories
High · 7.2 CVE-2025-10985 EUVD-2025-34211GHSA-v8pq-c937-5mwc

OS command injection in the admin panel of Ivanti EPMM before version 12.6.0.2, 12.5.0.4, and 12.4.0.4 allows a remote authenticated attack…

Published Oct 14, 2025 · Updated Feb 26, 2026 · Assigned by ivanti

Vendor: ivanti Product: Endpoint Manager Mobile Category: Network devices

Description

OS command injection in the admin panel of Ivanti EPMM before version 12.6.0.2, 12.5.0.4, and 12.4.0.4 allows a remote authenticated attacker with admin privileges to achieve remote code execution.

Affected products

VendorProductAffectedFixed
Ivanti Endpoint Manager Mobile — 12.6.0.2

Advisories 1

References